Author: ate
Date: Wed Apr 21 00:37:21 2010
New Revision: 936127
URL: http://svn.apache.org/viewvc?rev=936127&view=rev
Log:
JS2-1188: Download page does not have link to KEYS file
Modified:
portals/site/jetspeed/jetspeed-2.2/src/site/xdoc/download.xml
Modified: portals/site/jetspeed/jetspeed-2.2/src/site/xdoc/download.xml
URL:
http://svn.apache.org/viewvc/portals/site/jetspeed/jetspeed-2.2/src/site/xdoc/download.xml?rev=936127&r1=936126&r2=936127&view=diff
==============================================================================
--- portals/site/jetspeed/jetspeed-2.2/src/site/xdoc/download.xml (original)
+++ portals/site/jetspeed/jetspeed-2.2/src/site/xdoc/download.xml Wed Apr 21
00:37:21 2010
@@ -77,7 +77,7 @@
<th>Signature</th>
</tr>
<tr>
-
<td>jetspeed-2-2.2.1-src.zip</td>
+
<td>jetspeed-2-2.2.1-source-release.zip</td>
<td><a
href="http://www.apache.org/dyn/closer.cgi/portals/jetspeed-2/sources/jetspeed-2-2.2.1-source-release.zip";>here</a></td>
<td><a
href="http://www.apache.org/dist/portals/jetspeed-2/sources/jetspeed-2-2.2.1-source-release.zip.md5";>here</a></td>
<td><a
href="http://www.apache.org/dist/portals/jetspeed-2/sources/jetspeed-2-2.2.1-source-release.zip.asc";>here</a></td>
@@ -93,8 +93,8 @@
<th>Signature</th>
</tr>
<tr>
- <td>j2-admin-2.2.1-src.zip</td>
- <td><a
href="http://www.apache.org/dist/portals/jetspeed-2/sources/j2-admin-2.2.1-source-release.zip";>here</a></td>
+ <td>j2-admin-2.2.1-source-release.zip</td>
+ <td><a
href="http://www.apache.org/dyn/closer.cgi/portals/jetspeed-2/sources/j2-admin-2.2.1-source-release.zip";>here</a></td>
<td><a
href="http://www.apache.org/dist/portals/jetspeed-2/sources/j2-admin-2.2.1-source-release.zip.md5";>here</a></td>
<td><a
href="http://www.apache.org/dist/portals/jetspeed-2/sources/j2-admin-2.2.1-source-release.zip.asc";>here</a></td>
</tr>
@@ -110,6 +110,33 @@
Important information for migrating
existing Jetspeed-2.0, 2.1.x installations to Jetspeed-2.2 is provided in the
<a href="guide-migration.html">migration guide</a>.
</p>
</subsection>
+ <subsection name="Verify the integrity of the files">
+ <p>
+ It is essential that you verify the integrity of the downloaded
files using the PGP or MD5 signatures.
+ Please read <a
href="http://www.apache.org/info/verification.html";>Verifying Apache Software
Foundation Releases</a>
+ for more information on why you should verify our releases.
+ </p>
+ <p>
+ The PGP signatures can be verified using PGP or GPG.
+ First download these <a
href="http://www.apache.org/dist/portals/jetspeed-2/KEYS";>KEYS</a> as well as
the asc signature file for the relevant distribution.
+ Make sure you get these files from the main distribution site,
rather than from a mirror.
+ Then verify the signatures using
+ <source><![CDATA[ % pgpk -a KEYS
+ % pgpv downloaded_file.asc
+or
+ % pgp -ka KEYS
+ % pgp downloaded_file.asc
+or
+ % gpg --import KEYS
+ % gpg --verify downloaded_file.asc]]></source>
+ </p>
+ <p>
+ Alternatively, you can verify the MD5 signature on the files. A
unix program called md5 or md5sum is included in many unix distributions.
+ It is also available as part of <a
href="http://www.gnu.org/software/textutils/textutils.html";>GNU Textutils</a>.
+ Windows users can get binary md5 programs from <a
href="http://www.fourmilab.ch/md5/";>here</a>,
+ <a
href="http://www.pc-tools.net/win32/freeware/console/";>here</a>, or <a
href="http://www.slavasoft.com/fsum/";>here</a>.
+ </p>
+ </subsection>
</section>
</body>
